code-du-travail-numerique icon indicating copy to clipboard operation
code-du-travail-numerique copied to clipboard

chore(ci): use kontinuous deploy

Open revolunet opened this issue 3 years ago • 1 comments

kontinuous

revolunet avatar Aug 12 '22 14:08 revolunet

New dependency changes detected. Learn more about Socket for GitHub ↗︎


👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary
Issue Status
Install scripts ✅ 0 issues
Native code ✅ 0 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues

📊 Modified Dependency Overview:

🚮 Removed packages: @babel/[email protected], @kosko/[email protected], @kubernetes-models/[email protected], @socialgouv/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]

socket-security[bot] avatar Apr 07 '23 13:04 socket-security[bot]

  • Est-ce qu'il ne manque pas ELASTIC_APM_ENVIRONMENT et ES_INDEX_PREFIX
  • p-e utiliser les ressources telles que définies actuellement
  • p-e autoscale seulement en preprod/prod ?
  • en prod mettre host: code.travail.gouv.fr

revolunet avatar Apr 07 '23 14:04 revolunet

@revolunet si carrément pour les variables d'environment, elles étaient côtées CI, j'avais pas vu :)

maxgfr avatar Apr 17 '23 11:04 maxgfr

Il reste à gérer les github actions

maxgfr avatar Apr 17 '23 12:04 maxgfr